[Bug 1319973] [NEW] libuuid needs a default shell (seems to not specify any?)

[Alec Warner]

*** This bug is a security vulnerability ***

Public security bug reported:

antarus at killbot:~$ getent passwd libuuid
libuuid:x:100:101::/var/lib/libuuid:

A missing shell specification means it takes the default shell (usually
/bin/sh).


DISTRIB_CODENAME=trusty
DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=14.04

antarus at killbot:/tmp$ apt-cache policy libuuid1
libuuid1:
  Installed: 2.20.1-5.1ubuntu20
  Candidate: 2.20.1-5.1ubuntu20

It should have /usr/sbin/nologin as its shell.

-A

** Affects: util-linux (Ubuntu)
     Importance: Undecided
     Assignee: Marc Deslauriers (mdeslaur)
         Status: Confirmed

** Affects: util-linux (Ubuntu Trusty)
     Importance: Undecided
         Status: Confirmed

** Affects: util-linux (Ubuntu Utopic)
     Importance: Undecided
     Assignee: Marc Deslauriers (mdeslaur)
         Status: Confirmed

** Affects: util-linux (Debian)
     Importance: Unknown
         Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to util-linux in Ubuntu.
https://bugs.launchpad.net/bugs/1319973

Title:
  libuuid needs a default shell (seems to not specify any?)

Status in “util-linux” package in Ubuntu:
  Confirmed
Status in “util-linux” source package in Trusty:
  Confirmed
Status in “util-linux” source package in Utopic:
  Confirmed
Status in “util-linux” package in Debian:
  Unknown

Bug description:
  antarus at killbot:~$ getent passwd libuuid
  libuuid:x:100:101::/var/lib/libuuid:

  A missing shell specification means it takes the default shell
  (usually /bin/sh).


  DISTRIB_CODENAME=trusty
  DISTRIB_DESCRIPTION="Ubuntu Trusty Tahr (development branch)"
  DISTRIB_ID=Ubuntu
  DISTRIB_RELEASE=14.04

  antarus at killbot:/tmp$ apt-cache policy libuuid1
  libuuid1:
    Installed: 2.20.1-5.1ubuntu20
    Candidate: 2.20.1-5.1ubuntu20

  It should have /usr/sbin/nologin as its shell.

  -A

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/util-linux/+bug/1319973/+subscriptions